5:16:30 PM Explorer:FFFEFC05 Attributes C:\START.VBS SUCCESS GetAttributes 5:16:30 PM Explorer:FFFEFC05 Attributes C: SUCCESS GetAttributes 5:16:30 PM Explorer:FFFEFC05 Open C:\WIN98SE\SYSTEM\GDI32.DLL SUCCESS OPENEXISTING READONLY DENYWRITE 5:16:30 PM Explorer:FFFEFC05 Seek C:\WIN98SE\SYSTEM\GDI32.DLL SUCCESS Beginning Offset: 0 / New offset: 0 5:16:30 PM Explorer:FFFEFC05 Seek C:\WIN98SE\SYSTEM\GDI32.DLL SUCCESS End Offset: 0 / New offset: 0 5:16:30 PM Explorer:FFFEFC05 Seek C:\WIN98SE\SYSTEM\GDI32.DLL SUCCESS Beginning Offset: 0 / New offset: 0 5:16:30 PM Explorer:FFFEFC05 Read C:\WIN98SE\SYSTEM\GDI32.DLL SUCCESS Offset: 0 Length: 0 5:16:30 PM Explorer:FFFEFC05 Read C:\WIN98SE\SYSTEM\GDI32.DLL SUCCESS Offset: 114688 Length: 4096 5:16:30 PM Explorer:FFFEFC05 Close C:\WIN98SE\SYSTEM\GDI32.DLL SUCCESS CLOSE_FOR_PROCESS 5:16:30 PM Explorer:FFFEFC05 Close C:\WIN98SE\SYSTEM\GDI32.DLL SUCCESS CLOSE_FINAL 5:16:30 PM Explorer:FFFEFC05 Attributes C: SUCCESS GetAttributes 5:16:30 PM Explorer:FFFEFC05 FindOpen C:\START.VBS SUCCESS start.vbs 5:16:30 PM Explorer:FFFEFC05 FindClose C:\START.VBS SUCCESS 5:16:30 PM Explorer:FFFEFC05 Attributes D: SUCCESS GetAttributes 5:16:30 PM Explorer:FFFEFC05 FindOpen D:\FZWORK SUCCESS FZwork 5:16:30 PM Explorer:FFFEFC05 FindClose D:\FZWORK SUCCESS 5:16:30 PM Explorer:FFFEFC05 Attributes C: SUCCESS GetAttributes 5:16:30 PM Explorer:FFFEFC05 FindOpen C:\START.VBS SUCCESS start.vbs 5:16:30 PM Explorer:FFFEFC05 FindClose C:\START.VBS SUCCESS 5:16:30 PM Explorer:FFFEFC05 Attributes C: SUCCESS GetAttributes 5:16:30 PM Explorer:FFFEFC05 FindOpen C:\FZWORK SUCCESS FZwork 5:16:30 PM Explorer:FFFEFC05 FindClose C:\FZWORK SUCCESS 5:16:30 PM Explorer:FFFEFC05 Attributes C: SUCCESS GetAttributes 5:16:30 PM Explorer:FFFEFC05 FindOpen C:\START.VBS SUCCESS start.vbs 5:16:30 PM Explorer:FFFEFC05 FindClose C:\START.VBS SUCCESS 5:16:30 PM Explorer:FFFEFC05 Attributes C: SUCCESS GetAttributes 5:16:30 PM Explorer:FFFEFC05 FindOpen C:\FZWORK SUCCESS FZwork 5:16:30 PM Explorer:FFFEFC05 FindClose C:\FZWORK SUCCESS 5:16:30 PM Explorer:FFFEFC05 Attributes C: SUCCESS GetAttributes 5:16:30 PM Explorer:FFFEFC05 FindOpen C:\START.VBS SUCCESS start.vbs 5:16:30 PM Explorer:FFFEFC05 FindClose C:\START.VBS SUCCESS 5:16:30 PM Explorer:FFFEFC05 Attributes C: SUCCESS GetAttributes 5:16:30 PM Explorer:FFFEFC05 FindOpen C:\FZWORK SUCCESS FZwork 5:16:30 PM Explorer:FFFEFC05 FindClose C:\FZWORK SUCCESS 5:16:31 PM Explorer:FFFEFC05 Attributes C:\START.VBS SUCCESS GetAttributes 5:16:31 PM Explorer:FFFEFC05 FindOpen C:\START.VBS SUCCESS start.vbs 5:16:31 PM Explorer:FFFEFC05 FindClose C:\START.VBS SUCCESS 5:16:31 PM Explorer:FFFEFC05 Open C:\WIN98SE\WSCRIPT.EXE SUCCESS OPENEXISTING READONLY DENYNONE 5:16:31 PM Explorer:FFFEFC05 Attributes C:\WIN98SE\WSCRIPT.EXE SUCCESS Get Access 5:16:31 PM Explorer:FFFEFC05 Attributes C:\WIN98SE\WSCRIPT.EXE SUCCESS Set Access 5:16:31 PM Explorer:FFFEFC05 Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 0 Length: 64 5:16:31 PM Explorer:FFFEFC05 Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 232 / New offset: 232 5:16:31 PM Explorer:FFFEFC05 Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 232 Length: 64 5:16:31 PM Explorer:FFFEFC05 Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 304 / New offset: 304 5:16:31 PM Explorer:FFFEFC05 Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 304 Length: 4 5:16:31 PM Explorer:FFFEFC05 Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 324 / New offset: 324 5:16:31 PM Explorer:FFFEFC05 Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 324 Length: 4 5:16:31 PM Explorer:FFFEFC05 Close C:\WIN98SE\WSCRIPT.EXE SUCCESS CLOSE_FINAL 5:16:31 PM Explorer:FFFEFC05 Attributes C:\WIN98SE\WSCRIPT.EXE SUCCESS GetAttributes 5:16:31 PM Explorer:FFFEFC05 Open C:\WIN98SE\WSCRIPT.EXE SUCCESS OPENEXISTING READONLY DENYNONE 5:16:31 PM Explorer:FFFEFC05 Attributes C:\WIN98SE\WSCRIPT.EXE SUCCESS Get Access 5:16:31 PM Explorer:FFFEFC05 Attributes C:\WIN98SE\WSCRIPT.EXE SUCCESS Set Access 5:16:31 PM Explorer:FFFEFC05 Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 0 Length: 64 5:16:31 PM Explorer:FFFEFC05 Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 232 / New offset: 232 5:16:31 PM Explorer:FFFEFC05 Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 232 Length: 64 5:16:31 PM Explorer:FFFEFC05 Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 304 / New offset: 304 5:16:31 PM Explorer:FFFEFC05 Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 304 Length: 4 5:16:31 PM Explorer:FFFEFC05 Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 324 / New offset: 324 5:16:31 PM Explorer:FFFEFC05 Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 324 Length: 4 5:16:31 PM Explorer:FFFEFC05 Close C:\WIN98SE\WSCRIPT.EXE SUCCESS CLOSE_FINAL 5:16:31 PM Explorer:FFFEFC05 Attributes C: SUCCESS GetAttributes 5:16:31 PM Explorer:FFFEFC05 Attributes C: SUCCESS GetAttributes 5:16:31 PM Explorer:FFFEFC05 Attributes C:\WIN98SE\WSCRIPT.EXE SUCCESS GetAttributes 5:16:31 PM Explorer:FFFEFC05 Open C:\WIN98SE\WSCRIPT.EXE SUCCESS OPENEXISTING READONLY DENYWRITE 5:16:31 PM Explorer:FFFEFC05 Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 0 Length: 64 5:16:31 PM Explorer:FFFEFC05 Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 232 / New offset: 232 5:16:31 PM Explorer:FFFEFC05 Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 232 Length: 248 5:16:31 PM Explorer:FFFEFC05 Close C:\WIN98SE\WSCRIPT.EXE SUCCESS CLOSE_FINAL 5:16:31 PM Explorer:FFFEFC05 Directory C: SUCCESS CHECK 5:16:31 PM ???:FFFB944D Attributes C: SUCCESS GetAttributes 5:16:31 PM ???:FFFB944D Attributes C:\WIN98SE\WSCRIPT.EXE SUCCESS GetAttributes 5:16:31 PM ???:FFFB944D Directory C:\WIN98SE\WSCRIPT.EXE SUCCESS QUERY 5:16:31 PM ???:FFFB944D Open C:\WIN98SE\WSCRIPT.EXE SUCCESS OPENEXISTING READONLY DENYWRITE 5:16:31 PM ???:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 0 Length: 64 5:16:31 PM ???:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 232 / New offset: 232 5:16:31 PM ???:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 232 Length: 248 5:16:31 PM ???:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 232 / New offset: 232 5:16:31 PM ???:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 232 Length: 408 5:16:31 PM ???:FFFB944D Directory C:\WIN98SE\WSCRIPT.EXE SUCCESS QUERY 5:16:31 PM ???:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 77824 Length: 4096 5:16:31 PM ???:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 671744 Length: 4096 5:16:31 PM ???:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 671744 Length: 4096 5:16:31 PM ???:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 4096 Length: 4096 5:16:31 PM ???:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 4096 Length: 4096 5:16:31 PM ???:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 675840 Length: 3584 5:16:31 PM ???:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 544768 Length: 4096 5:16:31 PM ???:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 548864 Length: 4096 5:16:31 PM ???:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 552960 Length: 4096 5:16:31 PM ???:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 544768 Length: 4096 5:16:31 PM ???:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 8192 Length: 4096 5:16:31 PM ???:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 8192 Length: 4096 5:16:31 PM ???:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 311296 Length: 4096 5:16:31 PM ???:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 315392 Length: 4096 5:16:31 PM ???:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 319488 Length: 4096 5:16:31 PM ???:FFFB944D Read C:\WIN98SE\SYSTEM\MSVCRT.DLL SUCCESS Offset: 237568 Length: 4096 5:16:31 PM ???:FFFB944D Read C:\WIN98SE\SYSTEM\MSVCRT.DLL SUCCESS Offset: 237568 Length: 4096 5:16:31 PM ???:FFFB944D Read C:\WIN98SE\SYSTEM\MSVCRT.DLL SUCCESS Offset: 212992 Length: 4096 5:16:31 PM ???:FFFB944D Read C:\WIN98SE\SYSTEM\MSVCRT.DLL SUCCESS Offset: 212992 Length: 4096 5:16:31 PM ???:FFFB944D Read C:\WIN98SE\SYSTEM\MSVCRT.DLL SUCCESS Offset: 241664 Length: 1536 5:16:31 PM ???:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 65536 Length: 4096 5:16:31 PM ???:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 69632 Length: 4096 5:16:31 PM ???:FFFB944D Read C:\WIN98SE\SYSTEM\MSVCRT.DLL SUCCESS Offset: 221184 Length: 4096 5:16:31 PM ???:FFFB944D Read C:\WIN98SE\SYSTEM\MSVCRT.DLL SUCCESS Offset: 225280 Length: 4096 5:16:31 PM ???:FFFB944D Read C:\WIN98SE\SYSTEM\MSVCRT.DLL SUCCESS Offset: 233472 Length: 4096 5:16:31 PM ???:FFFB944D Read C:\WIN98SE\SYSTEM\MSVCRT.DLL SUCCESS Offset: 229376 Length: 4096 5:16:31 PM Wscript:FFFB944D Directory C: SUCCESS CHECK 5:16:31 PM Wscript:FFFB944D FindOpen C:\WIN98SE\WIN.INI SUCCESS WIN.INI 5:16:31 PM Wscript:FFFB944D FindClose C:\WIN98SE\WIN.INI SUCCESS 5:16:31 PM Wscript:FFFB944D Open C:\WIN98SE\WIN.INI SUCCESS OPENEXISTING READWRITE DENYWRITE 5:16:31 PM Wscript:FFFB944D Ioctl C: SUCCESS Subfunction: 08h 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\WIN.INI SUCCESS Get Modify 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WIN.INI SUCCESS End Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WIN.INI SUCCESS Beginning Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WIN.INI SUCCESS Offset: 0 Length: 13834 5:16:31 PM Wscript:FFFB944D Close C:\WIN98SE\WIN.INI SUCCESS CLOSE_FINAL 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\WSCRIPT.EXE.LOCAL NOTFOUND GetAttributes 5:16:31 PM Wscript:FFFB944D Attributes C:\PROGRAM FILES\WMFPATCH\GDIHOOK.DLL SUCCESS GetAttributes 5:16:31 PM Wscript:FFFB944D Directory C:\PROGRAM FILES\WMFPATCH\GDIHOOK.DLL SUCCESS QUERY 5:16:31 PM Wscript:FFFB944D Read C:\PROGRA~1\WMFPATCH\GDIHOOK.DLL SUCCESS Offset: 77312 Length: 2560 5:16:31 PM Wscript:FFFB944D Read C:\PROGRA~1\WMFPATCH\GDIHOOK.DLL SUCCESS Offset: 77312 Length: 2560 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 557056 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 135168 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 139264 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 712704 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 172032 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 733184 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 176128 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 471040 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 585728 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 65536 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 483328 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 499712 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 573440 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 577536 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 581632 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 479232 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 487424 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 569344 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 491520 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 503808 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 565248 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 475136 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 233472 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 278528 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 53248 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 327680 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 389120 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 98304 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 319488 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 73728 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 335872 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 249856 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 94208 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 77824 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 196608 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\PROGRA~1\WMFPATCH\GDIHOOK.DLL SUCCESS Offset: 73728 Length: 3584 5:16:31 PM Wscript:FFFB944D Open C:\WIN98SE\SYSTEM\GDI32.DLL SUCCESS OPENEXISTING READONLY DENYWRITE 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\SYSTEM\GDI32.DLL SUCCESS Beginning Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\SYSTEM\GDI32.DLL SUCCESS End Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\SYSTEM\GDI32.DLL SUCCESS Beginning Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\GDI32.DLL SUCCESS Offset: 0 Length: 0 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\GDI32.DLL SUCCESS Offset: 114688 Length: 4096 5:16:31 PM Wscript:FFFB944D Close C:\WIN98SE\SYSTEM\GDI32.DLL SUCCESS CLOSE_FOR_PROCESS 5:16:31 PM Wscript:FFFB944D Close C:\WIN98SE\SYSTEM\GDI32.DLL SUCCESS CLOSE_FINAL 5:16:31 PM Wscript:FFFB944D Read C:\PROGRA~1\WMFPATCH\GDIHOOK.DLL SUCCESS Offset: 0 Length: 1024 5:16:31 PM Wscript:FFFB944D Open C:\WIN98SE\SYSTEM\KERNEL32.DLL SUCCESS OPENEXISTING READONLY DENYWRITE 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\SYSTEM\KERNEL32.DLL SUCCESS Beginning Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\SYSTEM\KERNEL32.DLL SUCCESS End Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\SYSTEM\KERNEL32.DLL SUCCESS Beginning Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\KERNEL32.DLL SUCCESS Offset: 0 Length: 0 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\KERNEL32.DLL SUCCESS Offset: 327680 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\KERNEL32.DLL SUCCESS Offset: 331776 Length: 4096 5:16:31 PM Wscript:FFFB944D Close C:\WIN98SE\SYSTEM\KERNEL32.DLL SUCCESS CLOSE_FOR_PROCESS 5:16:31 PM Wscript:FFFB944D Close C:\WIN98SE\SYSTEM\KERNEL32.DLL SUCCESS CLOSE_FINAL 5:16:31 PM Wscript:FFFB944D Open C:\WIN98SE\SYSTEM\KERNEL32.DLL SUCCESS OPENEXISTING READONLY DENYWRITE 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\SYSTEM\KERNEL32.DLL SUCCESS Beginning Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\SYSTEM\KERNEL32.DLL SUCCESS End Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\SYSTEM\KERNEL32.DLL SUCCESS Beginning Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\KERNEL32.DLL SUCCESS Offset: 0 Length: 0 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\KERNEL32.DLL SUCCESS Offset: 327680 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\KERNEL32.DLL SUCCESS Offset: 331776 Length: 4096 5:16:31 PM Wscript:FFFB944D Close C:\WIN98SE\SYSTEM\KERNEL32.DLL SUCCESS CLOSE_FOR_PROCESS 5:16:31 PM Wscript:FFFB944D Close C:\WIN98SE\SYSTEM\KERNEL32.DLL SUCCESS CLOSE_FINAL 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\SYSBCKUP\VER.DLL SUCCESS Beginning Offset: 757 / New offset: 757 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSBCKUP\VER.DLL SUCCESS Offset: 757 Length: 256 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\SYSBCKUP\VER.DLL SUCCESS Beginning Offset: 757 / New offset: 757 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSBCKUP\VER.DLL SUCCESS Offset: 757 Length: 256 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\MSVCRT.DLL SUCCESS Offset: 245760 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\MSVCRT.DLL SUCCESS Offset: 217088 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 0 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\MSVCRT.DLL SUCCESS Offset: 270336 Length: 3584 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\MSVCRT.DLL SUCCESS Offset: 249856 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 73728 Length: 1536 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\WSHENA.DLL NOTFOUND GetAttributes 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\WSHENA.DLL NOTFOUND GetAttributes 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\WSHENA.DLL NOTFOUND GetAttributes 5:16:31 PM Wscript:FFFB944D Attributes C:\WSHENA.DLL NOTFOUND GetAttributes 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\SYSTEM\WSHENA.DLL NOTFOUND GetAttributes 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\WSHENA.DLL NOTFOUND GetAttributes 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\COMMAND\WSHENA.DLL NOTFOUND GetAttributes 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\SYSTEM32\WSHENA.DLL NOTFOUND GetAttributes 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\WSHEN.DLL NOTFOUND GetAttributes 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\WSHEN.DLL NOTFOUND GetAttributes 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\WSHEN.DLL NOTFOUND GetAttributes 5:16:31 PM Wscript:FFFB944D Attributes C:\WSHEN.DLL NOTFOUND GetAttributes 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\SYSTEM\WSHEN.DLL NOTFOUND GetAttributes 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\WSHEN.DLL NOTFOUND GetAttributes 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\COMMAND\WSHEN.DLL NOTFOUND GetAttributes 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\SYSTEM32\WSHEN.DLL NOTFOUND GetAttributes 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\WSHENU.DLL NOTFOUND GetAttributes 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\WSHENU.DLL NOTFOUND GetAttributes 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\WSHENU.DLL NOTFOUND GetAttributes 5:16:31 PM Wscript:FFFB944D Attributes C:\WSHENU.DLL NOTFOUND GetAttributes 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\SYSTEM\WSHENU.DLL NOTFOUND GetAttributes 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\WSHENU.DLL NOTFOUND GetAttributes 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\COMMAND\WSHENU.DLL NOTFOUND GetAttributes 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\SYSTEM32\WSHENU.DLL NOTFOUND GetAttributes 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 188416 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 36864 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 8192 Length: 4096 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\WSCRIPT.EXE SUCCESS GetAttributes 5:16:31 PM Wscript:FFFB944D Attributes C: SUCCESS GetAttributes 5:16:31 PM Wscript:FFFB944D FindOpen C:\WIN98SE SUCCESS WIN98SE 5:16:31 PM Wscript:FFFB944D FindClose C:\WIN98SE SUCCESS 5:16:31 PM Wscript:FFFB944D FindOpen C:\WIN98SE\WSCRIPT.EXE SUCCESS WSCRIPT.EXE 5:16:31 PM Wscript:FFFB944D FindClose C:\WIN98SE\WSCRIPT.EXE SUCCESS 5:16:31 PM Wscript:FFFB944D Open C:\WIN98SE\WSCRIPT.EXE SUCCESS OPENEXISTING READONLY DENYNONE 5:16:31 PM Wscript:FFFB944D Ioctl C: SUCCESS Subfunction: 08h 5:16:31 PM Wscript:FFFB944D Ioctl C: SUCCESS Subfunction: 0Eh 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\WSCRIPT.EXE SUCCESS Get Modify 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 0 Length: 8 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS End Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 0 Length: 14 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 0 Length: 64 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 232 / New offset: 232 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 232 Length: 64 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 232 / New offset: 232 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 232 Length: 196 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\WSCRIPT.EXE SUCCESS Get Access 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\WSCRIPT.EXE SUCCESS GetAttributes 5:16:31 PM Wscript:FFFB944D Open C:\WIN98SE\WSCRIPT.EXE SUCCESS OPENEXISTING READONLY DENYWRITE 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 0 Length: 4 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 4 / New offset: 4 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS End Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 4 / New offset: 4 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 0 Length: 0 5:16:31 PM Wscript:FFFB944D Close C:\WIN98SE\WSCRIPT.EXE SUCCESS CLOSE_FOR_PROCESS 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 0 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 77824 Length: 4096 5:16:31 PM Wscript:FFFB944D Close C:\WIN98SE\WSCRIPT.EXE SUCCESS CLOSE_FINAL 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\WSCRIPT.EXE SUCCESS Set Access 5:16:31 PM Wscript:FFFB944D Close C:\WIN98SE\WSCRIPT.EXE SUCCESS CLOSE_FINAL 5:16:31 PM Wscript:FFFB944D Open C:\WIN98SE\WSCRIPT.EXE SUCCESS OPENEXISTING READONLY DENYNONE 5:16:31 PM Wscript:FFFB944D Ioctl C: SUCCESS Subfunction: 08h 5:16:31 PM Wscript:FFFB944D Ioctl C: SUCCESS Subfunction: 0Eh 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\WSCRIPT.EXE SUCCESS Get Modify 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 0 Length: 8 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS End Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 0 Length: 14 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 0 Length: 64 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 232 / New offset: 232 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 232 Length: 64 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 232 / New offset: 232 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 232 Length: 196 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\WSCRIPT.EXE SUCCESS Get Access 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\WSCRIPT.EXE SUCCESS GetAttributes 5:16:31 PM Wscript:FFFB944D Open C:\WIN98SE\WSCRIPT.EXE SUCCESS OPENEXISTING READONLY DENYWRITE 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 0 Length: 4 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 4 / New offset: 4 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS End Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 4 / New offset: 4 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 0 Length: 0 5:16:31 PM Wscript:FFFB944D Close C:\WIN98SE\WSCRIPT.EXE SUCCESS CLOSE_FOR_PROCESS 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 0 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 77824 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 81920 Length: 4096 5:16:31 PM Wscript:FFFB944D Close C:\WIN98SE\WSCRIPT.EXE SUCCESS CLOSE_FINAL 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\WSCRIPT.EXE SUCCESS Set Access 5:16:31 PM Wscript:FFFB944D Close C:\WIN98SE\WSCRIPT.EXE SUCCESS CLOSE_FINAL 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\WSCRIPT.EXE SUCCESS GetAttributes 5:16:31 PM Wscript:FFFB944D Attributes C: SUCCESS GetAttributes 5:16:31 PM Wscript:FFFB944D FindOpen C:\WIN98SE SUCCESS WIN98SE 5:16:31 PM Wscript:FFFB944D FindClose C:\WIN98SE SUCCESS 5:16:31 PM Wscript:FFFB944D FindOpen C:\WIN98SE\WSCRIPT.EXE SUCCESS WSCRIPT.EXE 5:16:31 PM Wscript:FFFB944D FindClose C:\WIN98SE\WSCRIPT.EXE SUCCESS 5:16:31 PM Wscript:FFFB944D Open C:\WIN98SE\WSCRIPT.EXE SUCCESS OPENEXISTING READONLY DENYNONE 5:16:31 PM Wscript:FFFB944D Ioctl C: SUCCESS Subfunction: 08h 5:16:31 PM Wscript:FFFB944D Ioctl C: SUCCESS Subfunction: 0Eh 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\WSCRIPT.EXE SUCCESS Get Modify 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 0 Length: 8 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS End Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 0 Length: 14 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 0 Length: 64 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 232 / New offset: 232 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 232 Length: 64 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 232 / New offset: 232 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 232 Length: 196 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\WSCRIPT.EXE SUCCESS Get Access 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\WSCRIPT.EXE SUCCESS GetAttributes 5:16:31 PM Wscript:FFFB944D Open C:\WIN98SE\WSCRIPT.EXE SUCCESS OPENEXISTING READONLY DENYWRITE 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 0 Length: 4 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 4 / New offset: 4 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS End Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 4 / New offset: 4 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 0 Length: 0 5:16:31 PM Wscript:FFFB944D Close C:\WIN98SE\WSCRIPT.EXE SUCCESS CLOSE_FOR_PROCESS 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 0 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 77824 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 81920 Length: 4096 5:16:31 PM Wscript:FFFB944D Close C:\WIN98SE\WSCRIPT.EXE SUCCESS CLOSE_FINAL 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\WSCRIPT.EXE SUCCESS Set Access 5:16:31 PM Wscript:FFFB944D Close C:\WIN98SE\WSCRIPT.EXE SUCCESS CLOSE_FINAL 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 167936 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 380928 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 331776 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 49152 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 45056 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 356352 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 360448 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 385024 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 421888 Length: 4096 5:16:31 PM Wscript:FFFB944D Open C:\WIN98SE\WSCRIPT.EXE SUCCESS OPENEXISTING READONLY DENYWRITE 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 0 Length: 64 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 232 / New offset: 232 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 232 Length: 4 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 236 Length: 20 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 480 / New offset: 480 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 480 Length: 40 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 520 Length: 40 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 560 Length: 40 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 600 Length: 40 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 640 / New offset: 640 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 77824 / New offset: 77824 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 77824 Length: 16 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 77840 Length: 8 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 77848 / New offset: 77848 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 79352 / New offset: 79352 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 79352 Length: 2 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 79354 Length: 14 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 77848 / New offset: 77848 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 640 / New offset: 640 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 640 / New offset: 640 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 77880 / New offset: 77880 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 77880 Length: 16 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 77896 / New offset: 77896 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 77896 Length: 8 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 640 / New offset: 640 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 640 / New offset: 640 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 78192 / New offset: 78192 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 78192 Length: 16 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 78208 Length: 8 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 640 / New offset: 640 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 78888 / New offset: 78888 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 78888 Length: 16 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 368640 Length: 4096 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 78904 / New offset: 78904 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS End Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 78904 / New offset: 78904 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 78904 / New offset: 78904 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS End Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\WSCRIPT.EXE SUCCESS Beginning Offset: 78904 / New offset: 78904 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 0 Length: 0 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 450560 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 454656 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 61440 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 425984 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 81920 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WSCRIPT.EXE SUCCESS Offset: 86016 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 430080 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 434176 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 458752 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 446464 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLEAUT32.DLL SUCCESS Offset: 172032 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 208896 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 204800 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 233472 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 98304 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 221184 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 729088 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 217088 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 212992 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 192512 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 196608 Length: 4096 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\SYSTEM\VBSCRIPT.DLL SUCCESS GetAttributes 5:16:31 PM Wscript:FFFB944D Directory C:\WIN98SE\SYSTEM\VBSCRIPT.DLL SUCCESS QUERY 5:16:31 PM Wscript:FFFB944D Open C:\WIN98SE\SYSTEM\VBSCRIPT.DLL SUCCESS OPENEXISTING READONLY DENYWRITE 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\VBSCRIPT.DLL SUCCESS Offset: 0 Length: 64 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\SYSTEM\VBSCRIPT.DLL SUCCESS Beginning Offset: 256 / New offset: 256 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\VBSCRIPT.DLL SUCCESS Offset: 256 Length: 248 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\SYSTEM\VBSCRIPT.DLL SUCCESS Beginning Offset: 256 / New offset: 256 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\VBSCRIPT.DLL SUCCESS Offset: 256 Length: 448 5:16:31 PM Wscript:FFFB944D Directory C:\WIN98SE\SYSTEM\VBSCRIPT.DLL SUCCESS QUERY 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\VBSCRIPT.DLL SUCCESS Offset: 409600 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\VBSCRIPT.DLL SUCCESS Offset: 360448 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\VBSCRIPT.DLL SUCCESS Offset: 380928 Length: 2560 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\VBSCRIPT.DLL SUCCESS Offset: 376832 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\VBSCRIPT.DLL SUCCESS Offset: 385024 Length: 4096 5:16:31 PM Wscript:FFFB944D Open C:\WIN98SE\SYSTEM\GDI32.DLL SUCCESS OPENEXISTING READONLY DENYWRITE 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\SYSTEM\GDI32.DLL SUCCESS Beginning Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\SYSTEM\GDI32.DLL SUCCESS End Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Seek C:\WIN98SE\SYSTEM\GDI32.DLL SUCCESS Beginning Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\GDI32.DLL SUCCESS Offset: 0 Length: 0 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\GDI32.DLL SUCCESS Offset: 114688 Length: 4096 5:16:31 PM Wscript:FFFB944D Close C:\WIN98SE\SYSTEM\GDI32.DLL SUCCESS CLOSE_FOR_PROCESS 5:16:31 PM Wscript:FFFB944D Close C:\WIN98SE\SYSTEM\GDI32.DLL SUCCESS CLOSE_FINAL 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\WIN386.SWP SUCCESS Offset: 20189184 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 258048 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 266240 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 245760 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 417792 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 741376 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 655360 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 413696 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\VBSCRIPT.DLL SUCCESS Offset: 401408 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 184320 Length: 4096 5:16:31 PM Wscript:FFFB944D Open C:\START.VBS SUCCESS OPENEXISTING READONLY DENYWRITE 5:16:31 PM Wscript:FFFB944D Seek C:\START.VBS SUCCESS Beginning Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Seek C:\START.VBS SUCCESS End Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Seek C:\START.VBS SUCCESS Beginning Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Seek C:\START.VBS SUCCESS Beginning Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Seek C:\START.VBS SUCCESS End Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Seek C:\START.VBS SUCCESS Beginning Offset: 0 / New offset: 0 5:16:31 PM Wscript:FFFB944D Read C:\START.VBS SUCCESS Offset: 0 Length: 0 5:16:31 PM Wscript:FFFB944D Read C:\START.VBS SUCCESS Offset: 0 Length: 183 5:16:31 PM Wscript:FFFB944D Close C:\START.VBS SUCCESS CLOSE_FOR_PROCESS 5:16:31 PM Wscript:FFFB944D Close C:\START.VBS SUCCESS CLOSE_FINAL 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\VBSCRIPT.DLL SUCCESS Offset: 405504 Length: 2560 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\VBSCRIPT.DLL SUCCESS Offset: 368640 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\VBSCRIPT.DLL SUCCESS Offset: 364544 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\VBSCRIPT.DLL SUCCESS Offset: 397312 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\VBSCRIPT.DLL SUCCESS Offset: 389120 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 110592 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 126976 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\OLE32.DLL SUCCESS Offset: 118784 Length: 4096 5:16:31 PM Wscript:FFFB944D Read C:\WIN98SE\SYSTEM\MSVCRT.DLL SUCCESS Offset: 262144 Length: 4096 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\MEDIA\CHORD.WAV SUCCESS GetAttributes 5:16:31 PM Wscript:FFFB944D Open C:\WIN98SE\MEDIA\CHORD.WAV SUCCESS OPENEXISTING READONLY DENYNONE 5:16:31 PM Wscript:FFFB944D Ioctl C: SUCCESS Subfunction: 08h 5:16:31 PM Wscript:FFFB944D Attributes C:\WIN98SE\MEDIA\CHORD.WAV SUCCESS Get Modify 5:16:31 PM Wscript:FFFB944D Close C:\WIN98SE\MEDIA\CHORD.WAV SUCCESS CLOSE_FINAL 5:16:31 PM Filemon:FFF9C5CD FindOpen C:\WIN98SE SUCCESS WIN98SE 5:16:31 PM Filemon:FFF9C5CD FindClose C:\WIN98SE SUCCESS 5:16:31 PM Filemon:FFF9C5CD FindOpen C:\WIN98SE\WSCRIPT.EXE SUCCESS WSCRIPT.EXE 5:16:31 PM Filemon:FFF9C5CD FindClose C:\WIN98SE\WSCRIPT.EXE SUCCESS 5:16:31 PM Filemon:FFF9C5CD FindOpen C:\WIN98SE SUCCESS WIN98SE 5:16:31 PM Filemon:FFF9C5CD FindClose C:\WIN98SE SUCCESS 5:16:31 PM Filemon:FFF9C5CD FindOpen C:\WIN98SE\WSCRIPT.EXE SUCCESS WSCRIPT.EXE 5:16:31 PM Filemon:FFF9C5CD FindClose C:\WIN98SE\WSCRIPT.EXE SUCCESS 5:16:31 PM Filemon:FFF9C5CD Read C:\WIN98SE\WIN386.SWP SUCCESS Offset: 4685824 Length: 4096 5:16:31 PM Filemon:FFF9C5CD Read C:\WIN98SE\WIN386.SWP SUCCESS Offset: 17117184 Length: 4096 5:16:31 PM Filemon:FFF9C5CD Read C:\WIN98SE\WIN386.SWP SUCCESS Offset: 17121280 Length: 4096